prowler-additions-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Action": [
              "access-analyzer:List*",
              "apigateway:get*",
              "apigatewayv2:get*",
              "aws-marketplace:viewsubscriptions",
              "batch:listjobs",
              "clouddirectory:listappliedschemaarns",
              "clouddirectory:listdevelopmentschemaarns",
              "clouddirectory:listpublishedschemaarns",
              "cloudformation:list*",
              "cloudhsm:listavailablezones",
              "cloudsearch:list*",
              "cloudwatch:get*",
              "cloudwatch:list*",
              "codebuild:listbuilds*",
              "codestar:verify*",
              "cognito-identity:listidentities",
              "cognito-idp:list*",
              "cognito-sync:listdatasets",
              "connect:list*",
              "datapipeline:getaccountlimits",
              "dax:describeclusters",
              "dax:describedefaultparameters",
              "dax:describeevents",
              "dax:describeparametergroups",
              "dax:describeparameters",
              "dax:describesubnetgroups",
              "dax:describetable",
              "dax:listtables", 
              "devicefarm:list*",
              "discovery:list*",
              "dms:list*",
              "ds:ListAuthorizedApplications",
              "ds:DescribeRoles",
              "dynamodb:describebackup",
              "dynamodb:describeglobaltablesettings",
              "dynamodb:describelimits",
              "dynamodb:describereservedcapacity",
              "dynamodb:describereservedcapacityofferings",
              "dynamodb:describestream",
              "dynamodb:listtagsofresource",
              "ec2:get*",
              "ecr:describe*",
              "ecr:listimages",
              "elasticbeanstalk:listavailablesolutionstacks",
              "elasticmapreduce:list*",
              "elastictranscoder:list*",
              "gamelift:list*",
              "glacier:list*",
              "importexport:listjobs",
              "lambda:GetAccountSettings",
              "lambda:GetFunctionConfiguration",
              "lambda:GetLayerVersionPolicy",
              "lambda:GetPolicy",
              "lambda:List*",
              "lex:getbotaliases",
              "lex:getbotchannelassociations",
              "lex:getbots",
              "lex:getbotversions",
              "lex:getintents",
              "lex:getintentversions",
              "lex:getslottypes",
              "lex:getslottypeversions",
              "lex:getutterancesview",
              "lightsail:getblueprints",
              "lightsail:getbundles",
              "lightsail:getinstancesnapshots",
              "lightsail:getkeypair",
              "lightsail:getregions",
              "lightsail:getstaticips",
              "lightsail:isvpcpeered",
              "machinelearning:describe*",
              "mobilehub:listavailablefeatures",
              "mobilehub:listavailableregions",
              "mobilehub:listprojects",
              "mobiletargeting:getapplicationsettings",
              "mobiletargeting:getcampaigns",
              "mobiletargeting:getimportjobs",
              "mobiletargeting:getsegments",
              "opsworks-cm:describe*",
              "opsworks:describe*",
              "polly:describe*",
              "polly:list*",
              "redshift:viewqueriesinconsole",
              "route53domains:list*",
              "s3:listbucket",
              "sdb:list*",
              "secretsmanager:listsecretversionids",
              "servicecatalog:list*",
              "ses:list*",
              "sns:list*",
              "sqs:listqueuetags",
              "ssm:listassociations",
              "states:listactivities",
              "support:describe*",
              "swf:list*",
              "tag:gettagkeys",
              "trustedadvisor:describe*",
              "waf-regional:list*",
              "waf:list*",
              "workdocs:describeavailabledirectories",
              "workdocs:describeinstances",
              "workmail:describe*"
          ],
          "Effect": "Allow",
          "Resource": "*"
      }
  ]
}